SSL check results of buerger-cert.de

NEW You can also bulk check multiple servers.

Discover if the mail servers for buerger-cert.de can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

Report created Wed, 27 May 2020 00:31:05 +0000

The mailservers of buerger-cert.de can be reached through an encrypted connection.

However, we found problems that may affect the security.

Servers

Incoming Mails

These servers are responsible for incoming mails to @buerger-cert.de addresses.

Hostname / IP address Priority STARTTLS Certificates Protocol
publication.cert-bund.de
159.69.62.251
10
supported
*.managed-otrs.com
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
supported
  • ECDHE_RSA_WITH_RC4_128_SHA
  • SSL_RSA_WITH_RC4_128_SHA
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
12 s
bsi01.managed-otrs.com
159.69.62.250
20
supported
*.managed-otrs.com
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
2 s

Outgoing Mails

We have not received any emails from a @buerger-cert.de address so far. Test mail delivery

Certificates

First seen at:

CN=*.managed-otrs.com

Certificate chain
Subject
Common Name (CN)
  • *.managed-otrs.com
Alternative Names
  • *.managed-otrs.com
  • managed-otrs.com
Issuer
Country (C)
  • US
Organization (O)
  • DigiCert Inc
Organizational Unit (OU)
  • www.digicert.com
Common Name (CN)
  • RapidSSL RSA CA 2018
validity period
Not valid before
2018-04-25
Not valid after
2020-07-28
This certifcate has been verified for the following usages:
  • Digital Signature
  • Key Encipherment
  • TLS Web Server Authentication
  • TLS Web Client Authentication
Fingerprints
SHA256
14:20:7C:80:9C:4B:4D:AD:40:15:82:C1:9B:21:27:4F:E9:CE:19:C0:4D:4E:91:34:F8:A8:62:FD:93:53:21:13
SHA1
94:A9:30:1D:C7:D1:7F:02:87:EE:55:36:9A:16:F5:53:D2:CC:97:5A
X509v3 extensions
authorityKeyIdentifier
  • keyid:53:CA:17:59:FC:6B:C0:03:21:2F:1A:AE:E4:AA:A8:1C:82:56:DA:75
subjectKeyIdentifier
  • B2:89:AA:CE:A4:CD:87:50:1E:DF:53:CD:20:D9:35:A9:89:1E:71:A1
crlDistributionPoints
  • Full Name:
  • URI:http://cdp.rapidssl.com/RapidSSLRSACA2018.crl
certificatePolicies
  • Policy: 2.16.840.1.114412.1.2
  • CPS: https://www.digicert.com/CPS
  • Policy: 2.23.140.1.2.1
authorityInfoAccess
  • OCSP - URI:http://status.rapidssl.com
  • CA Issuers - URI:http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : A4:B9:09:90:B4:18:58:14:87:BB:13:A2:CC:67:70:0A:
  • 3C:35:98:04:F9:1B:DF:B8:E3:77:CD:0E:C8:0D:DC:10
  • Timestamp : Apr 25 14:54:15.931 2018 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:21:00:95:EA:27:81:94:3F:AB:BB:D2:8E:EA:
  • C2:C4:2A:AE:C8:40:11:EE:B4:A8:5C:19:A6:94:14:AC:
  • 08:D0:23:BD:DE:02:20:4C:35:B8:E2:57:4C:AC:4C:58:
  • 3E:66:A3:3C:CC:9E:99:A0:4B:47:70:CC:20:19:39:38:
  • 59:B7:DF:FF:C6:19:97
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 6F:53:76:AC:31:F0:31:19:D8:99:00:A4:51:15:FF:77:
  • 15:1C:11:D9:02:C1:00:29:06:8D:B2:08:9A:37:D9:13
  • Timestamp : Apr 25 14:54:16.224 2018 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:44:02:20:09:C0:BB:0F:1E:EF:D8:1F:AB:B0:C5:F8:
  • 36:76:EC:0B:6B:AB:D9:85:34:A6:1E:35:0D:1C:FF:D6:
  • DE:58:48:FD:02:20:63:6F:43:69:2F:8C:9F:CE:46:F7:
  • D3:BE:0D:33:72:34:FB:E7:67:37:09:0D:62:1B:6B:EE:
  • 14:45:56:EE:2A:ED
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : BB:D9:DF:BC:1F:8A:71:B5:93:94:23:97:AA:92:7B:47:
  • 38:57:95:0A:AB:52:E8:1A:90:96:64:36:8E:1E:D1:85
  • Timestamp : Apr 25 14:54:16.175 2018 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:20:57:D8:D6:2A:F6:21:AD:BE:94:6B:C5:13:
  • 4A:78:E5:C6:1C:3E:6E:A7:D1:4C:46:43:64:B3:56:6A:
  • EC:F4:FC:FD:02:21:00:DC:0A:AA:D8:75:6A:38:98:3F:
  • CD:C9:CE:74:00:B2:88:5E:EE:DE:1D:43:67:4B:3A:9B:
  • 40:B1:00:D4:38:3F:12
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 55:81:D4:C2:16:90:36:01:4A:EA:0B:9B:57:3C:53:F0:
  • C0:E4:38:78:70:25:08:17:2F:A3:AA:1D:07:13:D3:0C
  • Timestamp : Apr 25 14:54:16.517 2018 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:44:02:20:08:3B:71:13:28:5C:A5:70:85:95:C6:FA:
  • 63:AE:AA:71:DB:65:9C:0F:A0:0C:83:7D:DD:35:2D:60:
  • FD:C7:4F:AD:02:20:74:0E:7C:27:EC:98:7F:74:E7:26:
  • 1F:31:6E:1C:76:D9:D0:0E:F2:BC:2A:FE:B8:04:FE:66:
  • 84:40:35:DE:15:77